{Tutorial} How to dump memory with Peek Poker 2.0 rev 8

How to Dump Memory with Peek Poker


Peek Poker - Open Source Memory Editor is a great tool created by:
Cybersam, 8Ball, PureIso, Jappi88
Fairchild (Committer)
Mojobojo (Committer)
Feudalnate(Committer)
Natelx (xbdm)
optantic (Tester)
actualmanx (Tester)
ioritree (Tester)
If i missed anyone else i do apologize that list is from version 2.0 Rev 8 About tab.

.
For Peek Poker to connect to your Xbox 360 its needs to be modified to run homebrew plugin xbdm or a RGLoader Dev image on it. You will need your XBOX 360 IP address to connect to Peek Poker
Once you have all these basics done run Peek Poker and enter in your XBox 360 IP address then hit the Connect Button.


You should get a nice Connected pop up


Once connected you can select one of the Options Tabs. We will be selecting "DUMP"


Now you will see the DUMP Window open up with some new options.


Now you can hit one of the buttons to dump Physical RAM, Base File/Image, Allocated/Virtual or enter in your own Starting Offset and Dump Length

Xbox 360 Memory Map (Info from Peek Poker Version 2 Revision 8 User Manual) Google This and Read It has a lot of useful information.
Virtual 4-KB range: 0x00000000 – 0x3FFFFFFF
Virtual 64-KB range: 0x40000000 - 7FFFFFFF
Image/Code 64-KB range: 0x80000000 - 8BFFFFFF
Image/Code 4-KB range: 0x90000000 - 0x9FFFFFFF
Physical 64-KB Full Ram range: 0xA0000000 - 0xBFFFFFFF
Physical 16-MB Full Ram range: 0xC0000000 - 0xDFFFFFFF
Physical 4-KB Full Ram range: 0xE0000000 - 0xFFFFFFFF


Which Region do I DUMP when i am searching????? TRY THEM ALL
Each game is developed differently and offsets are stored in different memory regions.
Full 512MB Physical Ram Dump takes the longest.


Once you have chosen your memory region you wish to dump hit the "Dump" Button
Now a new window will pop up allowing you to select where to save and name your dump.
For the purpose of searching for offset for trainer making name the dump something similar to what your searching for.
Example: Looking for ammo??
Dump a region, save as BaseAmmo21
WHY?? BASEAMMO21

Base is because we dumped in Base range and will help you to remember what Memory Address range to peek/poke at once you find what your looking for.
Ammo because we are looking for ammo.
21 because that's current ammo amount.
You can name it whatever you like but that's how I do it to have my dumps organized and easy to search in Artmoney or whatever search tool you use.
After the dump is complete shoot your weapon and dump the same region again. This time name it something like BaseAmmo20, and repeat this until you have enough dumps to be able to find your Ammo offset with Artmoney or what ever search tool you use.

Peek Poker 2.0 rev 8 has its own Search function also that combines dumping and searching for values also. But that will be in another tutorial.